Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File:                     ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier:          1hYXjguOsygpYyay+iaFZlQtaFRpo5WowgAiWGHPLzI=
Subject key identifier:   70:B8:88:96:24:D6:56:78:25:1D:16:65:5B:4B:87:D2:01:59:B7:C4
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer:       /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial:       019EC337CB0368BAC0B3F46FFFCC4E58C1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 23:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:13 +0000
Files and hashes:         1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
                          2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: u8fpbTidXaRowNcDzBs5yeAFtRrWVl7KZJXG02tXknA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:cb:03:68:ba:c0:b3:f4:6f:ff:cc:4e:58:c1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
        Validity
            Not Before: Jun 13 23:01:13 2026 GMT
            Not After : Jun 14 23:01:13 2026 GMT
        Subject: CN=70b8889624d65678251d16655b4b87d20159b7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fd:bd:5b:55:fd:7f:5b:e0:76:5a:70:16:95:
                    9f:6d:63:e0:eb:1d:3f:ab:18:0b:c3:db:71:cf:71:
                    6a:78:9e:d8:88:9d:b4:ae:15:8e:88:de:11:6a:21:
                    22:89:85:8a:97:7b:eb:bd:e1:94:c2:fa:ef:94:33:
                    5b:d6:f4:07:ae:34:29:55:16:2e:e3:0c:09:da:8a:
                    c7:88:94:62:85:9d:7c:64:2a:b8:22:6c:97:55:c5:
                    20:55:93:6a:3b:61:67:63:9f:1a:cf:dc:2e:ef:a5:
                    ee:b4:bb:b9:33:10:87:ad:1f:b9:8c:4e:84:1a:62:
                    b0:06:46:8a:7e:a8:e8:14:42:0d:7f:e8:7e:ab:36:
                    fc:fd:49:b1:55:5e:60:00:fb:e2:16:cc:91:2b:61:
                    fe:7b:01:01:db:1c:63:0b:db:08:ad:9a:69:79:da:
                    6a:e2:d9:96:84:6f:c2:7e:6c:b6:de:5b:86:7a:48:
                    9d:cd:3e:06:16:f5:9a:41:67:53:41:f7:04:8a:12:
                    17:ca:d7:4a:0e:9f:94:3c:ff:a9:ba:8c:41:55:c1:
                    b6:8a:e8:e9:9f:b1:96:5e:78:b7:50:4f:a9:f7:39:
                    48:50:75:2e:40:45:d3:4e:ea:48:38:78:41:21:7c:
                    cf:92:76:07:c5:12:f6:2f:04:bf:7b:ca:50:66:6d:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B8:88:96:24:D6:56:78:25:1D:16:65:5B:4B:87:D2:01:59:B7:C4
            X509v3 Authority Key Identifier:
                keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c9:60:51:f7:7a:ef:3f:91:81:2b:b3:9c:3a:90:66:ce:81:
         d6:4c:ea:89:2d:17:81:c7:3f:01:53:fd:f9:44:5d:21:e5:d7:
         6d:31:ec:f7:15:e7:89:f4:dc:f6:a4:f6:69:c2:d9:6d:68:b9:
         c4:43:a1:96:21:a6:fe:88:f9:02:7b:57:32:f6:cc:86:e0:ff:
         42:79:bd:a0:73:c0:df:b1:60:d6:10:f4:b4:d2:a4:09:05:be:
         b2:a1:d4:84:cb:97:0f:2b:c3:31:c6:a5:5c:0c:81:be:fc:e7:
         e7:67:0a:e6:71:75:37:45:c6:94:82:06:95:b7:b7:0e:45:eb:
         dc:6f:01:69:0b:9e:70:2a:5b:56:1d:43:21:30:1e:b2:53:f6:
         3c:80:ed:5b:34:94:b6:ef:91:6f:28:9b:94:1d:01:f2:63:6e:
         cd:b5:2b:b0:4d:83:e1:bb:41:f4:65:7a:ac:ea:4d:d9:f2:c6:
         a3:55:5f:1a:78:dd:a0:a4:11:57:9e:ac:63:c9:92:ee:bb:0a:
         c3:a0:7e:5a:70:ac:80:de:75:f3:2d:f1:24:e0:08:b1:b9:f5:
         21:ed:35:0c:28:c9:e9:58:7b:7a:fe:c2:74:c7:03:c3:d3:34:
         a0:5e:83:25:fb:7c:74:f3:cd:cb:59:bb:57:0e:e7:e4:21:5a:
         91:c6:75:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:09 2026 by rpki-client